KR100606489B1 - management system and method for internet unification account and preservation - Google Patents

Abstract

The present invention relates to an Internet integrated account and security management system and method, and in particular, a user accesses a personal information management server, receives a personal unique code after real name authentication, and authorizes the user to use the service of the personal information management server. Steps; Accessing an Internet service provider server, inputting a name personal unique code, and selecting a list of personal information to be disclosed; Transmitting information input by the user from the Internet service provider server to the personal information management server and requesting real name authentication of the user and disclosure of selected personal information; The personal information management server requests the user to confirm the information requested by the Internet service provider server, and if there is a willingness to approve the request, transmits the information requested by the personal information management server to the Internet service provider server. Approving the member registration, and transmitting the login information input at the time of membership registration to the personal information management server to be stored in an encrypted state. By such a configuration, the present invention does not input the resident registration number, login information, personal information, etc. using the user's PC having a weak security status, thereby preventing the leakage of various personal information.

Description

Integrated management system and method for internet unification account and preservation

1 is a block diagram of an integrated Internet account and security management system according to the present invention.

Figure 2 is a flow chart of the process of joining as a member to the Internet operators server acquisition of a unique code in the Internet integrated account and security management method according to the present invention.

3 is a detailed flowchart of step S100 in FIG.

4 is a state diagram of a member registration page;

5 is a flowchart illustrating a process of logging in to an Internet service provider server to which a user has registered, without inputting login information according to the present invention.

6 is a flowchart of a process of performing site management of a group as a user of an authenticated group, which is a service provided by a personal information management server according to the present invention.

7 is a flowchart illustrating a process of collectively changing personal information of a user, which is a service provided by a personal information management server according to the present invention.

* Description of the symbols for the main parts of the drawings *

100: personal information management server 200: Internet operator server

300: User PC

The present invention relates to an integrated Internet account management system and method, and more particularly, to prevent leakage of a social security number that is input for real name authentication of an individual, and to a site joined by an individual and a site joined by an individual belonging to a group to which the individual belongs. The present invention relates to an integrated Internet account management system and method.

In general, in order to prevent duplicate subscriptions to sites that require real name authentication such as shopping malls or portals or other membership systems while using the Internet, enter a personal name and social security number to check for real name authentication or duplicate subscription. Should receive

As described above, the user's real name and social security number have to be entered every time the user joins different sites, which may cause the personal name and social security number to be leaked by a malicious hacking program. There is no way to prove it, but leakage of personal information is a serious social problem.

In addition, the damage caused by spam mails transmitted indiscriminately and harmful sites accessible through the Internet is increasing.

In order to prevent this, harmful site blocking or spam mail blocking software is spreading, but this can not block all harmful sites and spam mails, and there are errors such as blocking regular mails as spam mails.

The harmful site blocking software mainly functions to filter the display of a specific word, the name of a picture file displayed on a web page, and the like, if the specified word is included, but the site is implemented in a program format such as ASP. There was a problem that it was not easy to search for text.

In the past, harmful sites were referred to as adult sites, but recently, sites causing social problems such as suicide sites and crime sites have been created. There are many technical difficulties in blocking such sites.

In other words, it is necessary for parents to check a site to which a minor child has subscribed, but the conventional system has a problem in that it is impossible to check the status of joining a site of another person.

In view of the above problems, the present invention has an object of providing an integrated Internet account and security management system and method for verifying whether a real name authentication and duplicate subscription is required without a user entering a social security number when joining an Internet site.

In addition, the present invention can easily check the list of sites subscribed by an individual, and the Internet integrated account and security management system and method to easily check the list of subscribed Internet sites for individuals belonging to a group managed by a specific individual The purpose is to provide.

In addition, an object of the present invention is to provide an integrated Internet account and security management system and method that can protect users from spam mail by blocking mail sent from unverified sites.                         

The present invention for achieving the above object is the first to access the personal information management server through the user PC, receiving a personal unique code after real name authentication, the first to approve the use of the service of the personal information management server Steps; A second step of connecting a user to a specific Internet service provider server as a member to input a name personal unique code and to select a list of personal information to be disclosed; A third step of requesting the user's real name authentication and the disclosure of the selected personal information by transmitting the name, personal information and the selected public list inputted by the user from the Internet service provider server to the personal information management server; The personal information management server requests the user to confirm the information requested by the Internet service provider server, and if the user approves the information disclosure, the information requested by the personal information management server is transmitted to the Internet service provider server, and the Internet service provider server has a member. In addition to approving the subscription, there is a feature in that it comprises a fourth step of transmitting the login information input at the time of membership registration to the personal information management server to be stored in an encrypted state.

When described in detail with reference to the accompanying drawings, the present invention configured as described above are as follows.

1 is a block diagram of the Internet integrated account and security management system according to the present invention, after receiving the user's personal information as shown in the real name authentication, issuing a personal unique code and receiving the information of the Internet operator After authentication, the company issues a unique code for the business.If there is a request for personal information from the site to which the user subscribes, after approval of the user, the requested personal information is provided, and the user provides a service such as displaying a list of subscribed sites. And personal information management server 100 for safely storing and managing the login information and personal information of the; It provides a member registration menu for inputting a user's personal unique code and selecting information to be disclosed at the time of membership registration, and requesting the user's authentication and public information to the personal information management server 100 to receive and approve the membership. Internet service provider server 200 to provide a service; It consists of a user PC 300 that can access the Internet so that the user can use the services of the personal information management server 100 and the Internet service provider server 200.

FIG. 2 is a flowchart illustrating a process of a user registering as a member of a specific Internet service provider server after checking his / her real name in the Internet integrated account and security management method according to the present invention. As shown in FIG. Accessing the personal information management server 100 and receiving a personal unique code after real name authentication (S100); Accessing a specific Internet service provider server 200 and inputting the personal unique code and selecting a list of personal information to be disclosed (S200); Requesting the real name authentication and the disclosure of personal information by transmitting the name, personal information and the selected public list input by the user to the personal information management server 100 in the Internet service provider server 200; Requesting confirmation of the information requested by the Internet service provider server 200 from the personal information management server 100 (S400); Checking whether the user has made an intention of approving or rejecting the request (S500); And displaying the intention of denial of information disclosure in the personal information management server 100 when the intention of denial is displayed (S700); If the intention of rejection is indicated, the internet service provider server 200 cancels the membership of the user (S800); If the user approves in step S500, the information requested by the personal information management server is transmitted to the Internet service provider server 200, and the Internet service provider server 200 is configured to include a step of approving membership (S600). .

This registration process will be described in more detail.

First, in step S100 the user is given a personal unique code from the personal information management server 100 that operates in a more secure environment than the user PC 300 through real name authentication.

3 is a more detailed flow chart of the step S100, the user is connected to the personal information management server 100 through the user PC 300 as shown.

At this time, the personal information management server 100 checks whether there is software leaking personal information such as spyware on the user PC 300.

As a result of the check, if the spyware exists, the software is provided to remove the spyware, and if not, the connection is approved.

Next, in step S120, the user inputs his or her personal information such as his / her name, social security number, address, telephone number, gender, occupation, and age.

Then, in step S130, the name and resident registration number entered by the user is confirmed, and the authentication number is transmitted through a mobile phone or an e-mail, and when the user re-enters the authentication number, real name authentication is performed.

If the authentication fails in the step S130 to perform the step S120 again.

If the authentication is successful in step S130, in step S140 stores the personal information entered by the user according to the real name verification authentication.

Next, in step S150 generates a unique code of the user personal to the user.

At this time, the unique code may be displayed on the web, or may be recognized by the user in the form of a user's mobile phone text message or mail.

When the user sends a copy of the resident registration, etc. to the operator of the personal information management server 100, the user can be a manager of the group that can confirm the site subscription information of the family through confirmation.

The administrator of the corresponding group may access the personal information management server 100 and check the information of the site joined by each group member.

Next, in step S200, after the user is given a personal unique code through the above process, the user accesses a specific Internet service provider server 200 and registers as a member.

4 illustrates an embodiment of a member registration page provided by the Internet service provider server 200.

As shown in the drawing, the Internet service provider server 200 is changed from a form of inputting an existing name and a social security number to a form of receiving a name and a personal unique code in order to confirm a member's real name authentication or duplicate subscription.

This is because some of the malicious programs detect the keyboard input of the user PC 300 to leak personal information, so that the user PC 300 does not input the user's social security number, thereby preventing the social security number from leaking. will be.

In addition, an address, a phone number, a mobile phone number, an e-mail address, etc. required for membership is not directly input by the user, but has a structure in which the user can directly select a personal information list to be provided to the Internet service provider server 200.

This prevents the user's personal information from being leaked by malicious programs.

Next, in step S300, the Internet operator server 200 transmits the user's name and personal identification code and the selected public list to the personal information management server 100.

The Internet operator server 200 may be installed with software granted from the personal information management server 100, the operation of the personal information request, etc. are automatically made by the operation of the software.

The Internet service provider server 200 may be provided with a service provider unique code, such as the user from the personal information management server 100.

This is to increase the identification and reliability of Internet operators, and also to reduce spam through authentication.

In other words, e-mails sent from unauthenticated Internet operators or sent by unauthenticated individuals can be regarded as spam e-mails, thereby reducing spam e-mails.

Next, in step S400, the personal information management server 100 receiving the real name confirmation request from the Internet service provider server 200 and the selected personal information transmission request, the user personal web page of the personal information management server or the user's mobile phone text message, Check whether to authenticate the request of the Internet service provider server 200 through e-mail.

At this time, the authentication process can be more secure, and even if a user's personal unique code is leaked, it restricts the user from joining a specific site with only the personal unique code.

Next, in step S500 checks whether the user has refused or approved the membership.

If the user refuses to disclose the information to the Internet provider server 200 in step S500, the personal information management server 100 transmits the intention of rejection to the Internet service provider server 200 in step S700.

Next, in step S800, the Internet service provider server 200 having received the rejection doctor processes the user's intention to register as a member.

In addition, when the user approves to transmit the selected personal information to the corresponding Internet service provider server 200 in step S500, the personal information management server 100 requests and authenticates the real name requested by the internet service provider server 200 as in step S600. Send the requested personal information.

Through this process, the user can register as a member to a specific Internet service provider server 200, and designates an ID and password when registering.

Next, in step S900 using the program installed on the user PC 300 of the user registered as a member to the Internet service provider server 200 to encrypt the password described to log in to the Internet service provider server 200 the user It is stored in a storage device such as a floppy disk, a hard disk, or a CDROM of the PC 300.

The stored password is automatically input every time the user logs in to the Internet service provider server 200, so that the user can automatically input the password and approve login without inputting the password.

FIG. 5 is a flowchart illustrating a process of logging in to an Internet service provider server to which a user subscribes without inputting login information according to the present invention. As shown in FIG. 5, the user accesses the Internet service provider server 200 (S510). If a part of the personal unique code and ID is input (S520) and the personal unique code and the ID match (S530), the Internet service provider server 200 requests a password from the user PC 300 (S540).

If there is such a request, the user PC 300 transmits the encrypted password to the Internet service provider server 200 (S550), and logs in using the same (S560).

In addition, by using the site (S570) and logging out (S580), information such as login time is transmitted to the personal information management server 100 (S590).

As described above, the present invention does not directly input the social security number, address, e-mail address, telephone number, etc. of the user in the process of subscribing to a specific Internet service provider server 200, so that the input of the keyboard to the user PC 300 is leaked. Even if malicious programs are installed, personal information can be prevented from leaking.

In addition, the personal information disclosed to the Internet operator server 200 to which the user subscribes is also information that excludes the user's social security number, not necessarily the entire personal information, and the rest of the information can also be selected and disclosed by the user. The damage can be minimized.

6 is a flowchart of a process of performing site management of a group as a user of an authenticated group according to the present invention.

First, in order to be authenticated as a manager of a group, it is necessary to prove the scope of the group and the representative of the group.

For example, in the case of a parent with a minor child, to designate a child and me as a group, and to prove that the child is a parent of the minor child, mail the certificate of resident registration, etc. to the operator of the personal information management server 100 Or by fax or other means.

If the user is recognized as the administrator of the group by using the certificate, the user is not only a list of the plurality of Internet service provider servers 200 to which he is a member, but also a list of the Internet service provider servers 200 to which the children who are members of the group subscribe. You have the right to check the list.

In this state, when the user logs in to the personal information management server 100 as a group manager as in step S610, a list of the Internet operator server 200 of the group manager is displayed as in step S620 and group members belonging to the group. The list of the subscribed Internet business server 200 is displayed.

Next, in step S630, the group manager selects the Internet service provider server 200, logs in to the linked Internet service provider server 200, checks the service content of the Internet service provider server 200, and checks the service content in step S640. Judge the soundness.

Next, in step S660, if the contents of the service are not sound as determined by the administrator, the corresponding Internet service provider server 200 is reported to the unhealthy site.

Next, in step S670, the personal information management server 100 cancels the subscription of the group member or the administrator to the Internet service provider server 200 that has been reported as the unhealthy site, and subsequently does not allow the Internet service provider server 200 to re-subscribe. ) Will refuse to respond to requests for personal information required for membership registration.

As described above, the present invention designates a group manager to check membership information of group members, so that parents with minor children can easily check which sites their children have joined, and thus abuse of adults, suicides, crime sites, etc. You can protect your children from the site.

The group member may apply for withdrawal so that the manager cannot display it.

7 is a flowchart of a process of changing personal information of a user according to the present invention.

Referring to this, after the user logs in to the personal information management server 100 (S710), if the user's personal information is modified (S720), it is determined whether the modification is completed (S730) and the modification is completed and the information is stored. In addition, the personal information of the selectively changed user is transmitted to all the Internet service provider servers 200 to which the user subscribes (S740).

Such a process does not modify personal information by accessing each Internet service provider server 200 to which the user subscribes when personal information such as an address or a phone number is changed, and all Internet service provider servers 200 through one time information modification. Personal information stored in the can be modified to enable more convenient personal information management.

In the step of transmitting the personal information of the selectively changed user, the first user stores a public list of personal information designated when each Internet operator server 200 is accessed, and only personal information allowed to be disclosed for each Internet operator server 200. send.

 The present invention has been shown and described with reference to certain preferred embodiments, but the present invention is not limited to the above-described embodiments and has ordinary skill in the art to which the present invention pertains without departing from the concept of the present invention. Various changes and modifications are possible by the user.

As described above, the present invention prevents the personal information from being leaked in the process of inputting all the personal information including the social security number when registering as a member to a specific Internet service provider server using a personal computer that is not secure in security. It can be effective.

In addition, the present invention by adding a personal unique code and a business operator unique code that can be used only on the Internet to each of the user and the Internet operators, by blocking the mail to the sender of the unauthorized personal or business mail address as a spam mail, It can effectively block unknown spammers.

In addition, the present invention allows a user designated as a group administrator to check the membership of the Internet site of the group member, so that parents with minor children can protect the child from the unhealthy site by checking the site subscription information that the child subscribed to There is.

In addition, the present invention, if the user's personal information is changed, access to the personal information management server to change the personal information without any inconvenience to visit all the Internet sites subscribed to the user to change the member information, the changed information is registered as a member There is an effect of improving the ease of use by batch processing to be selectively transmitted to the Internet site.

Claims (6)

By giving a personally unique code to the authenticated user, you can use the personally unique code as a substitute for your social security number, reveal your approved personal information to Internet operators approved by the user, and if you are recognized as an administrator of the group you specify, A personal information management server that discloses Internet site subscription information to authorized users, When the user registers as a member, the name and the personal unique code are inputted, and the personal information to be disclosed is input by the selection method of the list rather than the direct input method, and the information is transmitted to the personal information management server so that the user's real name. An internet service provider server that receives the authentication and personal information corresponding to the selected list and authenticates the member; Internet integrated account and security management system, characterized in that the user is configured to the user computer to access the personal information management server and the Internet service provider server to use the service. A first step of issuing a personal unique code to a real name authenticated user accessed through the user PC in the personal information management server and using the service; A second step of requesting the disclosure of the user's real name authentication information and the selected personal information by transmitting the personal information of the user who is registered as a member to a specific Internet service provider server and the public list selected by the user to the personal information management server; The personal information management server requests the user to confirm the information requested by the Internet service provider server, and if the user approves the information disclosure, the information requested by the personal information management server is transmitted to the Internet service provider server, and the Internet service provider server has a member. Approving the subscription and the third step of transmitting the login information entered during the registration to the user PC to be stored in the storage device in an encrypted state, characterized in that the Internet integrated account and security management method. The method of claim 2, wherein the first step comprises: determining whether there is malicious software in a user PC connected to the personal information management server, and if there is no malicious software, receiving personal information and authenticating the real name; And storing the personal information of the real-name authenticated user and generating a personal unique code that can be used in place of a social security number on the Internet to recognize the user. The service of claim 2, wherein the service provided by the personal information management server displays a list of Internet service provider servers subscribed to by the user to check the status of membership, and when the user modifies personal information in the personal information management server. A service that selectively sends revised personal information to the Internet service provider server to modify them collectively, and if the user is authenticated as an administrator of the group designated by the user, the user authenticated as an administrator can check the list of Internet service provider servers that the member of the group has joined. Internet integrated account and security management method comprising a service. According to claim 2, The Internet service provider server can be given a business operator unique code from the personal information management server, the e-mail sent by a business operator or an individual who has not been given a business operator-specific code or personal unique code is regarded as spam mail Internet integrated account and security management method characterized in that the blocking. The method of claim 2, wherein the login information for logging in to the user's specific Internet service provider server stored in the user PC in step 4 is automatically called when the user accesses the Internet service provider server is transmitted to the Internet service provider server, Integrated Internet account and security management method characterized in that the user can log in to a particular Internet provider server without key input.

Images